
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
File: k524p4YADCa65IN7bs2uD4q60bA.mft (raw, json)
Hash identifier: RR/o6cH7U2aeBXrRTDK/VkpAawyCh3h6bvRLs3D9DLk=
Subject key identifier: AF:6B:D0:54:9D:85:9D:EC:2B:0D:F8:3A:D7:77:0A:1E:1E:9A:49:74
Authority key identifier: 93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0
Certificate issuer: /CN=A91CDEB3/serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0
Certificate serial: 19CC
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
Manifest number: 1996
Signing time: Tue 28 Jul 2026 16:29:55 +0000
Manifest this update: Tue 28 Jul 2026 16:29:55 +0000
Manifest next update: Tue 04 Aug 2026 16:29:55 +0000
Files and hashes: 1: k524p4YADCa65IN7bs2uD4q60bA.crl (hash: LqUM15W2T5ASn/6BB1yrwC2ZTr8CL+SB8nsTpIuVQ5c=)
2: 5705E30EFC7A11E8BFCC760AC4F9AE02.roa (hash: aHUYKJz3swuqsMEmIFAJ0GsRrZYFSKs8JsA+7j3SS9I=)
3: A6ACA298858911E88026B416C4F9AE02.roa (hash: xvpQufWbZtoOPenCGqByU4W+/Qf1CoRrTb220/EylgU=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl
rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 04 Aug 2026 16:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6604 (0x19cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CDEB3, serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0
Validity
Not Before: Jul 28 16:29:55 2026 GMT
Not After : Aug 4 16:29:55 2026 GMT
Subject: CN=6a68d903-a846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5c:5d:f0:5e:0f:8f:b5:0b:35:77:50:21:1c:
65:08:0f:d8:b1:9e:de:4b:2d:6d:d2:42:46:9a:6b:
d7:60:96:71:84:fe:49:39:fe:89:7c:26:87:82:36:
bd:d1:7e:72:25:ec:9d:14:36:03:7e:3c:53:d6:aa:
cc:ac:a2:14:4d:2d:18:69:da:1b:8d:9a:30:d8:31:
28:0c:a8:cb:e3:01:2b:0b:66:04:83:ca:da:99:cc:
b5:8a:24:16:09:d7:45:56:bc:11:83:44:f6:dd:15:
3c:e3:2e:7c:7e:cf:6c:da:a2:b4:7c:ff:52:d1:d4:
fb:07:04:67:6c:90:23:d0:df:4a:4d:ae:3a:6c:78:
3c:e1:f7:d6:34:75:44:c6:dc:f8:bd:36:1d:19:48:
63:ac:db:1d:47:74:47:da:ec:24:31:ff:17:00:06:
ef:5d:a6:20:7f:65:d8:31:ac:d9:7b:a5:4b:d0:d6:
34:93:59:03:4a:14:a9:9c:28:ee:f8:5e:32:50:8e:
7b:5c:63:8f:dd:2c:34:1d:fc:3b:f2:f2:e0:ba:e5:
73:e4:20:17:09:8b:34:c3:77:8b:87:68:fa:13:d2:
5f:6b:3b:1e:6e:e1:b8:b5:49:b8:3f:df:da:03:f7:
94:13:2b:9c:a2:05:e9:b3:58:f2:8e:87:8c:6a:9b:
57:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6B:D0:54:9D:85:9D:EC:2B:0D:F8:3A:D7:77:0A:1E:1E:9A:49:74
X509v3 Authority Key Identifier:
keyid:93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
24:3f:a2:b0:e5:a9:11:a5:36:0d:50:e0:22:fd:70:90:c6:22:
37:c0:38:d6:0c:51:5e:0f:9f:d6:1e:4b:3e:95:8b:ca:38:d3:
57:ca:94:77:17:4c:3f:4f:03:63:9d:98:20:c0:83:80:36:39:
73:3d:c1:53:be:a3:33:58:2b:70:66:5b:6b:76:1c:86:9d:87:
8f:b2:0f:e3:91:9a:5f:64:f1:a1:c6:cc:77:75:3b:b8:fe:cf:
56:ea:1a:cd:f3:81:6a:b0:f8:e0:4e:69:66:0a:9b:a4:23:5e:
f9:ef:7e:11:4c:67:05:b4:0d:46:0e:12:e4:d3:38:23:be:a4:
45:4e:bf:4c:9d:99:a2:58:3a:63:d5:3e:9a:1c:9b:bb:5c:e7:
5e:c8:42:ef:3b:78:19:73:1a:0a:e0:5c:6b:aa:ae:75:5a:ee:
ec:2f:80:a4:b6:c6:6d:e1:43:07:01:a7:c1:9b:d8:79:4c:f6:
08:de:62:7b:f2:c1:b9:13:62:d4:6a:73:2e:2a:d6:d1:36:5e:
7e:c2:f6:55:47:0f:b1:16:f3:00:98:dc:95:fc:b6:89:da:b4:
ca:83:c2:cc:8c:4a:54:af:93:81:b8:85:36:5c:4b:42:84:c0:
6a:2d:3c:1b:51:9d:14:71:12:48:14:ea:cc:81:98:42:df:74:
16:1a:04:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:45:02 2026 by rpki-client